Quantum repeaters and quantum key distribution: the impact of entanglement distillation on the 
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We investigate quantum repeaters in the context of quantum key distribution. We optimize the secret key rate 
per memory per second with respect to different distillation protocols and distillation strategies. For this purpose, 
we also derive an analytical expression for the average number of entangled pairs created by the quantum 
repeater, including classical communication times for entanglement swapping and entanglement distillation. 
We investigate the impact of this classical communication time on the secret key rate. We finally study the effect 
of the detector efficiency on the secret key rate. 
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I. INTRODUCTION AND MOTIVATION 

Losses in the optical fiber limit the distance for the distri- 
bution of entangled photon pairs and hence the range of quan- 
tum key distribution. Recent experiments cannot reach more 
than a few hundred kilometers (see, e.g., lU). To overcome 
thisproblem the concept of a quantum repeater was developed 
13, [so, which acts like a "distance-amplifier": it permits to en- 
hance the probability that an entangledpair is created at a cer- 
tain distance (see, e.g., calculations in iQl). For a recent review 
on quantum repeaters see IH]. The main ingredients of a quan- 
tum repeater are entanglement swapping 161 and entanglement 
distillation 10-01 ■ After the distribution of entangled photon 
pairs between two distant parties, one can perform quantum 
key distribution (for reviews see, e.g., flITofI'). 

Since the original proposal of the quantum repeater, exist- 
ing protocols were analyzed or improved, inter alia lITTl - lzsll . 
Moreover, new protocols like, e.g., the hybrid quantum re- 
peater [23] or quantum repeaters with atomic ensembles ll26l 
were introduced. 

Recently, the following analyses of the secret key rate in 
connection with a quantum repeater were performed: in ||27| a 
quantum key distribution (QKD) setup with one repeater node 
and without distillation is investigated. In this case, the param- 
eters for the optimal secret key rate are explored. In lESl the 
secret key rate for one node for the Duan-Lukin-Cirac-ZoUer 
(DLCZ)-repeater ll26ll is analyzed. Reference ||29[] treats a 
variation of the DLCZ-repeater, namely 1I20I1 . In ll30ll secret 
key rates for the original quantum repeater [Q, for the hy- 
brid quantum repeater ll23l and for a variation of the DLCZ- 
repeater ifisll are investigated, where distillation was consid- 
ered only before the first entanglement swapping. Here, we 
want to lift this restriction and allow distillation in all nesting 
levels. 

The main goal of the current work is to analyze the achiev- 
able secret key rate under different distillation protocols and 
strategies. For the distillation protocols we consider a recur- 
rence protocol S and the entanglement pumping protocol ^ . 
The protocol 191] is more efficient regarding the final fidelity 
for perfect gates but at an expense of an exponentially grow- 
ing number of memories. The protocol in Ref. reaches a 
higher fidelity than the protocol in Ref. Jgl in a certain regime 



of errors, and uses less spatial resources, but at the expense 
of a temporal overhead. As done in the Refs. ll29[ I31I1 . we 
will divide the secret key rate by the number of memories 
needed per node. For the distillation strategies of the quan- 
tum repeater we consider a nested distillation scheme, i.e., 
where distillation after each swapping is performed. A spe- 
cial case will be distillation only before the first swapping, 
which might be experimentally more feasible. We thoroughly 
investigate the case where the number of distillation rounds 
in each nesting level is identical. Then, we lift this restric- 
tion and vary the number of distillation rounds individually 
after each swapping. Additionally, we account for the clas- 
sical communication time needed for acknowledging the suc- 
cess of entanglement swapping and entanglement distillation 
in the quantum repeater nodes. For this purpose we will de- 
rive a formula for the generation rate of the entangled pairs 
(repeater rate) including these classical communication times. 

The paper is structured as follows: in Sec.|II]we review the 
concept of quantum repeaters, the relevant distillation proto- 
cols, and distillation strategies. In Section |lll] we present an- 
alytical formulas for the secret key rates. As the secret key 
rate is a product of the secret fraction and the repeater rate, 
we will derive the latter for the different distillation protocols. 
In Sec.|IV]we analyze the quantum repeater in the context of 
quantum key distribution and present the optimal secret key 
rates. Here, the secret key rates are optimized with respect 
to the different distillation protocols and distillation strate- 
gies, the number of nesting levels, the number of distillation 
rounds, and the number of used memories. Furthermore, we 
investigate the impact of finite-efficiency detectors on the se- 
cret key rate. Then, we will fix the number of required memo- 
ries and investigate the optimal setup. In Sec.[V]the influence 
of the classical communication time on the secret key rate is 
analyzed. We conclude in Sec. I VII 



II. QUANTUM REPEATER AND DISTILLATION 
STRATEGIES 

In Fig.[T]we show a quantum repeater setup, whose concept 
was introduced in [2]. The goal is to establish an entangled 
pair between the two parties Alice and Bob over the distance 
L. For this reason, one divides the distance into segments of 
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length Lq - where is the number of maximal nesting 
levels for swapping. The segments are connected by repeater 
stations, which are able to perform Bell measurements and 
distillation. Due to entanglement swapping the fidelity de- 
grades, which we compensate by entanglement distillation. 
We define the fidelity of a state p as its overlap with the Bell 



state |<^+) 



V2 



(|00> + |ll»,i.e., 

F{p) := <0lp|<^+). 



(1) 



where |0) (|1)) is, e.g., a horizontally (vertically) polarized 
photon. 

In the following we will describe the distillation protocols 
that we want to compare. Our figure of merit for the compar- 
ison is the secret key rate, in contrast to Ref. JH, where the 
final fidelity of the entangled state was investigated. As the 
secret key rate is not only a function of the fidelity, our con- 
clusions for optimal distillation are different from Ref. iU. In 
the following we will assume analogously to iH that the quan- 
tum gates are subjected to depolarizing noise with probability 
(1 ~ Pc) and with probability pc they are perfeclQ. 
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1. Recurrence protocol: The Deutsch et al. protocol 

The Deutsch et al. protocol |9i|, sometimes called Oxford 
protocol, works in a similar way as the distillation protocol 
introduced in [0,01 > but is more efficient. It can reach a higher 
fidelity in fewer distillation rounds, and therefore results in 
higher secret key rates. In general the protocol operates on 
Bell-diagonal states, i.e.. 



PBell 



(2) 



withA,B,C,D > Q,A+B + C+D = l,andn|^) = (i/^l being 
the projectors onto the four Bell states |0=^) - (|00) + |1 1)) 

and - (|01) ± |10)). For each state of the form in 
Eq. (|2|, the first qubit belongs to Alice, the second to Bob. 
Both share two pairs of the state given in Eq. Alice (Bob) 
applies a njl (-n/l) rotation about the X-axis on her (his) two 
qubits, followed by a cnot operation on both sides. After that 
a bilocal measurement on one qubit in the computational basis 
is performed. The values of the parameters A, B, C, and D as a 
function of the imperfections of the cnot and the fidelity F can 
be found in {y^. The protocol works in a recursive way, i.e., 
it uses two copies of the same fidelity for the next distillation 
step; therefore it is called recurrence protocol (see Fig.|2]i. 



Alice 



Bob 




FIG. 1. (Color online) A generic quantum repeater protocol with 
nested distillation (see text). 



FIG. 2. Recurrence protocol: Deutsch et al. protocol (figure adapted 
from d). The fidefity is the fidefity in the A;-th distillation round. 



A. The distillation protocols 

General distillation protocols consist of performing local 
operations on n qubit pairs resulting in m < n pairs with a 
higher fidelity than the initial pairs. Throughout this paper 
we will consider protocols that operate on two qubit pairs and 
lead to one qubit pair Usually, local operations and a cnot- 
gate are applied. The sequence of these operations is specific 
for every protocol. Finally, both parties perform a measure- 
ment and depending on the outcome the resulting pair has a 
higher fidelity or is discarded. Thus, the protocols are prob- 
abilistic. In the following we biiefly describe the protocols 
considered in this paper 



The formulas for the fidelity and the success probability considering this 
error parameter can be also found in Ijl- Difi"erent to (sj], we do not assume 
any misaligmnent and the single-qubit operation is eiTor free. 



2. Entanglement pumping: The Diir et al. protocol 

This protocol introduced in Jst], sometimes also called Inns- 
bruck protocol, uses the Deutsch et al. protocol, but the two 
input states do not need to have the same fidelity. Here, dis- 
tillation is performed with an auxiliary pair having always the 
same initial fidelity Fq, see Fig. [3] hence the name entangle- 
ment pumping. We see that different to the Deutsch et al. pro- 
tocol the number of required memories does not depend on the 
number of rounds of distillation, but it is linear in the number 
of nesting levels (see Sec. lIIICT l. 

; i F„ ]- ! 1 Fn IH I F„ ' ^ 

FIG. 3. Entanglement pumping: Diir et al. protocol (figure adapted 
from H). 
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Throughout the paper we will assume that we only start 
with entanglement swapping and entanglement distillation 
when both pairs are present. 



B. Distillation strategies for tlie quantum repeater 

The protocols described in the previous section can be in- 
serted into the quantum repeater protocol in different ways. In 
the following we want to compare two different specific dis- 
tillation strategies. For this purpose we define the distillation 
vector 



k - (ko, ...,kN) 



(3) 



for the distillation rounds, where each component with index 
n gives the number of distillation rounds in the «-th nesting 
level (see Fig. [T]). Throughout the paper distillation strat- 
egy a denotes a strategy with the same number of distillation 
rounds in each nesting level, hence the distillation vector is 
= [k, k). A strategy which might be less demanding for 
experimental realization^ is the distillation strategy j3 (see 
Fig. m, where we only distill at the beginning. The distilla- 
tion vector is thus P - (A:, 0, 0). In Sec. IIVC 11 we will 
use general distillation vectors. This strategy will be called 
distillation strategy y. 



particles in some measurement basis. In this paper we con- 
sider the six-state protocol SB; the BB84-protocol S 
leads to similar secret key rates. The former works as follows: 
for each qubit pair Alice and Bob each perform measurements 
in the X-, Y- and Z-direction. After the measurement the used 
basis is announced [sifting phase). Only those measurement 
results where their measurement bases coincided will be uti- 
lized in the further analysis. We adopt here the asymmetric 
protocol ll36ll which uses different probabilities for the choice 
of the measurement direction. In this protocol the sifting pa- 
rameter, i.e., the fraction of sifted bits, is one in the asymptotic 
limit, which we also assume here. The quantum bit error rate 
(QBER), i.e., the fraction of discordant bits, bounds the eaves- 
dropping attempt: if it is above a certain threshold the protocol 
is aborted. The quantity we are interested in is the secret key 
rate K per memory per second, which is the product of the 
repeater rate R^^p and the secret fraction r^, (see, e.g., 101 for 
a review) divided by the number of memories: 



(4) 



with the superscript i being either D (Deutsch et al. protocol) 
or Diir (Diir et al. protocol). 

In the following sections we will describe or derive each 
component of the secret key rate given in Eq. (|4|i. 
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FIG. 4. (Color online) Distillation strategy p: distillation only in the 
beginning. 



III. SECRET KEY RATES AND THE QUANTUM 
REPEATER 



In the previous section we have described the generation of 
entangled pairs over a distance L between the parties Alice 
and Bob using the quantum repeater protocol. For performing 
quantum key distribution (QKD), they measure each of their 



A. Tlie secret fraction 

The secret fraction is the ratio of secret bits and the mea- 
sured bits in the asymptotic limit, thus denoted by r^,. It is 
given by the so-called Devetak-Winter bound fSTl and can be 
expressed in terms of the error rates appearing in the six-state 
protocol 10, Appendix A] : 



- 1 - ezh 



\+{ex- eY)/ez 



-(l-ez)h 
-h{ez). 



l-jex + ey + ez)/2 
1 - ez 



(5) 



with h(p) - -p logj p - (1 - p) log2(l - p) being the binary 
Shannon entropy and ex, ey and ez being the error rates in the 
X-, Y-, and Z-basis, respectively. For a detailed analysis of 
the topic of quantum key distribution in connection to quan- 
tum repeaters we refer to [|30|. Note that the secret fraction 
depends on the following parameters: the initial fidelity Fq, 
the gate quaUty pc, the maximal nesting level A^, the distilla- 
tion vector k, and the distillation protocol. 



B. Tlie repeater rate, including classical communication times 



^ When only swapping is performed, one can collect the outcomes of the 
Bell-measurements and later apply bit-flips on the classical data resulting 
from the QKD-measurement on the final state (see also f3Cll ). For the case 
of distillation after swapping the single-qubit rotations have to be applied, 
thus the number of quantum operations is increased. 



By the repeater rate /?Rep we denote the average number of 
long-distance entangled pairs generated by the quantum re- 
peater per second. Considering a setup which connects only 
the neighboring pairs (so-called parallelization), several for- 
mulas for different physical realizations of a quantum repeater 



4 



were derived: Ref. jssll treats the repeater rate for determin- 
istic swapping and probabilistic distillation before the first 
swapping, Ref. iS'i] deduces the rate for probabilistic swapping 
without distillation and in fso'] the formula from the latter ref- 
erence was modified to allow distillation before the first swap- 
ping. These expressions have in common that they do not con- 
sider the classical communication times needed to acknowl- 
edge the success of entanglement swapping and entanglement 
distillation. In the following we will derive a repeater rate for 
probabilistic swapping and probabilistic distillation including 
these communication times. Our derivation is inspired by the 
recurrence formula developed for quantum repeaters based on 
nitrogen-vacancy (NV) centers in diamond ll39ll . In SeclVlwe 
show how the secret key rate changes, when we omit the clas- 
sical communication times needed for entanglement swapping 
and entanglement distillation. We will always assume that the 
entanglement distribution requires classical communication. 



1. The Deutsch et al. protocol 

We define the repeater rate to be the reciprocal value of the 
time T^{k, N) needed to establish an entangled pair over the 
distance L, with being the maximal nesting level and the 
distillation vector k - {h), k^), i.e.. 



R 



1 



Rep 



TQT°(k,N) 



(6) 



Here, the superscript D refers to the Deutsch et al. protocol. 
Note that the time t°(^, A^) is given in units of the fundamental 
time Tq :- ^, with c = 2 ■ 10^ km/s the speed of light in the 
optical fiber and Lq :- ^ the fundamental length, i.e., the 
distance between the repeater stations. The symbol T^{kN,N) 
with only one vector component k^ as first argument denotes 
the time needed in nesting level for k^ distillation rounds. 
In the following we present a recurrence formula for T^ik^, N) 
given by: 



T^ikN ^0,N>0) 
T°{kN >0,N)^ 



2 

To' 

1 



Pes(N) 



+2' 



1 



+2"], 



1,N) 



(7a) 



(7b) 



(7c) 



with Pes{N) being the success probability of entanglement 
swapping in the A^-th nesting level and P^(i,N) being the 
probability of success for entanglement distillation using the 
Deutsch et al. protocol in the i-th distillation round in the 
A^-th nesting level. Here Pq is the probability to generate 
an entangled photon pair over a distance Lq and is given by 
P,) = 10""^°^'", with a - 0.17 dB/km being the attenuation 
coeflicient. To explain the recurrence formula in Eq. (|7), we 
start from the first line [Eq. (iTatl. There, we assume that the 



source is placed at one side and the photon is distributed over 
the distance Lq leading to a distribution time of To- The ac- 
knowledgment of the arrival of the photons needs at least the 
same time, so we have in total 2To (see f so!] for further details 
and other schemes of entanglement distribution). We divide 
by the probability Pq to generate this entangled photon pair as 
on average we have to perform this process times (see, e.g., 
Istl for an explicit calculation of this waiting time). The next 
line [Eq. ( fTbl il gives the time for the A^-th nesting level before 
starting with distillation, i.e., it is the time directly after en- 
tanglement swapping. The formula consists of two parts: the 
generation time for the pairs needed to begin the swapping 
|^|r'^(A:A?-i , A^ - DToj (see, e.g., jsl Appendix A] for an expla- 
nation of the factor |) and the time to acknowledge the success 
of the swapping, i.e., 2'^"' To; both divided by the probability 
of successful swapping in the A^-th nesting level 



1 



Pes(N) 



Note 



that the factor j is an approximation for small probabilities. 
The first part |^ | r*^ (A:^?- 1 , A^ - 1 ) To j corresponds to the average 
time to generate two pairs after k^-i rounds of distillation in 
the (A^- l)-th nesting level. The last line [Eq. ( iTcl il concludes 
the recurrence formula: we need the time jT^(kf^ - l,N)To 
to generate two pairs for the k^-th round of distillation. As 
distillation is performed over the distance ^ the acknowledg- 
ment time is 2'^ro. Both terms are divided by the probability 
of success for entanglement distillation |^P^(^a(, A^)j. 

We present the analytic solution of the recurrence formula 
in Eq. (|7]l in the Appendix„ Eq. iA.2i . 



2. The Diir et al. protocol 

The repeater rate for the Diir et al. protocol diff'ers from 
the repeater rate for the Deutsch et al. protocol, as the entan- 
glement distillation process works in a sequential way, i.e., 
the auxiliary pair for each distillation round is always the 
same (see Fig. |3]l. As the swapping process is the same in 
both distillation protocols, Eqs. dSal i and dSbj i are analogous to 
Eqs. dTaJi and dTEj i: 



T™'"(/to = 0,A^ = 0) 



2 



(8a) 



T (kN 



T^^\kN >0,N)^ 



0,N>0) 



1 



Pes{N) 



,N-l) 



(8b) 



1 



■[t°"(^^-1,A^) 



'^(^^,A^) 

+T°"(0,A?) + 2^]. (8c) 

The third line [Eq. (IScl il differs fromEq. (iTct . Equation (l8c] i 
represents the time needed to distill a pair in the k^-th round 
in the A^-th nesting level. In the entanglement pumping pro- 
tocol, we start to produce the elementary pair p(kff = 0, A^) 
for distillation when the pair to be distilled, pik^ - 1 , A^), is 
present. Thus, we have to add the time for generating the 
elementary pair t^^'XC, N)T() to the time for the pair to be dis- 
tilled, T^"'{kN -l,N)To. The repeater rate for the Diir et al. is 
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then given by 



R 



1 



Rep 



(9) 



We give an analytic solution of the recurrence formula in 
the Appendix, Eq. ( IA.3b . 



C. Number of memories 

In this section we describe the needed number of memo- 
ries at each half of the repeater station (see the black dots in 
Fig-[D- The vector k consists of the number k„ of distillation 
rounds in the «-th nesting level, see Eq. (O. The number of 
memories needed at half a node for the Deutsch et al. protocol 
is 



(10) 



because in each nesting level the number of memories needs 
to be increased by a factor of 2*", as the distillation for all 
nesting levels is done in parallel. The superscript D denotes 
the Deutsch et al. protocol. 

The Diir et al. protocol works in a sequential way, so the 
number of memories is 



\{ki : ki = 0)1, 



(11) 



where the set : A:, = 0)| is the number of elements in k that 
are zero. Equation (flU for strategy a, i.e., k - {k, k, k), can 
be explained as follows: For nesting level = 0, at most two 
memories are needed for the distillation process (see Fig. 13). 
The resulting pair p(ko,N = 0) at distance Lq after ko distil- 
lation rounds is stored in one memory, and the other one is 
emptied. After swapping two neighboring pairs we have the 
pair p{Q,N = 1) at the distance ILq. For starting the distilla- 
tion process in this nesting level (A^ = 1), one needs another 
pair p{0,N =1), which is generated by the same procedure 
as above, so two additional memories are needed. In total 
one needs three memories for = 1. For strategy /?, i.e., 
k = {k,Q,..., 0), one just needs two memories where we store 
the state during the gate operation. 



IV. OPTIMAL SECRET KEY RATES: COMPARING 
DIFFERENT DISTILLATION PROTOCOLS AND 
STRATEGIES 

A. Comparison of liey rates (strategy a vs /?) 

We investigate how the Deutsch et al. and the Diir et al. pro- 
tocol perform under gate errors where we use the secret key 
rates as a figure of merit. 

In the following we calculate the secret key rate divided by 
the number of needed memories [see Eq. (|4]i]. The division by 
the number of memories allows for a fair comparison when 
considering the resources. For a fixed set of parameters Fq 



(initial fidelity) and pc (gate quality) we aim at finding the op- 
timal distillation protocol, the optimal number of distillation 
rounds, the optimal number of nesting levels, the best distil- 
lation strategy, and the minimal number of memories. Note 
that in the ideal case, i.e., for perfect detectors, we assume the 
entanglement swapping to be deterministic, i.e., PssiN) - 1. 

We will consider two error models for the input states: on 
one hand depolarized states, and on the other hand so-called 
binary states. The latter states are interestin g, a s they can 
be produced by the hybrid quantum repeater ll23[ |40|| . Ad- 
ditionally, in yl it was mentioned that the binary state given 
in Eq. ( fT3l l below has the optimal shape for the Diir et al. pro- 
tocol. 



1. Input states: Depolarized states 

In this section we want to investigate the optimal secret key 
rates [Eq. Q] when we start with depolarized states, i.e.. 



PDep - Fn\^+) + 



1 -F 



(ni, 



+ + n. 



ir>j 



(12) 



Optimization of the distillation protocols (Deutsch et al. or 
Diir et al. ), the number of nesting levels A^, the number of dis- 
tillation rounds k, and the distillation strategy (a or /?), leads 
to the secret key rates depicted in Fig. |5] (a). We point out 
that we find the global maximum as we calculate K' for all 
possible combinations of parameters for the length L and then 
choose the maximal value. The parameters leading to the op- 
timal secret key rates of Fig. |5](a) are shown in Figs. |5](b)-(f). 
The optimal distillation protocol is shown in Fig.|5](b). It is 
difficult to find an intuitive explanation why in certain regimes 
either the Deutsch et al. or the Diir et al. protocol is optimal; 
there are many different effects such as the repeater rates [see 
Eqs. d?) and the number of memories and the resulting 
state. Figure |5] (c) shows the optimal number of distillation 
rounds (for the optimal distillation strategy) that lead to the 
secret key rate per memory per second of Fig. |5](a). We find 
that for a wide range of parameters it is enough to have A: < 3 
distillation rounds. The role of the optimal number of nesting 
levels is treated in Fig.|5](d). We find that with increasing gate 
quality and initial fidelity more nesting levels are optimal. In 
figure|5](e) the optimal of the two distillation strategies (a) or 
(J3) is shown: for good gates and low fidelities it is better to 
only distill in the beginning, which would be experimentally 
less demanding. We emphasize that in this regime of parame- 
ters distillation in later nesting levels degrades the secret key 
rate. From the previous plots, we calculate in Fig. |5](f) the 
minimal number of memories needed to obtain the secret key 
rate in Fig.|5](a). 

Figure|6]provides a zoom of Fig.|5](f) into the region, where 
the secret key rate is in the order of bits per second. In the 
black region no distillation is optimal, therefore we only need 
one memory. For the number of memories M - 2 and M - 4, 
the optimal protocol is the Deutsch et al. protocol, whereas 
for M = 6 the Diir et al. protocol becomes favorable. We see 
from Eq. ( fTOl i that in a single setup the number of memories 
is restricted to a power of two for the Deutsch et al. protocol. 
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FIG. 5. (Color online) (a) Optimal secret key rate per memory per second [Eq. (|4}] for the distance L = 600 km. The smallest secret key 
rate still depicted is chosen to be 10"'" secret bits per second per memory. In the white region an extraction of a non-zero secret key rate is 
not possible. The parameters for the optimal secret key rate per memory per second are: (b) Distillation protocols: Deutsch et al. protocol 
(blue), Diir et al. protocol (green), and no distillation (yellow), (c) Number of rounds of distillation k (for the optimal distillation strategy), 
(d) Number of nesting levels A', (e) Distillation strategies: Strategy a (nested distillation) and strategy yS (distillation only before the first 
entanglement swapping), (f) Number of used memories per repeater node. 



If we want to use, e.g., M - 6 memories and the Deutsch et 
al. protocol, we have to employ setups in parallel. We will 
treat this subject in Sec. IIVC2I 




FIG. 6. (Color online) Expanded region from Fig. |5](f): Number 
of memories that lead to the optimal secret key rate per second per 
memory [see Eq. (|4j, L = 600 km]. 



2. Input states: Binaiy states 

We will now consider binary states, i.e., states of the form 

PBin = F \<p^) <0+| +(1-F) \<p-) {</>-] . (13) 

We performed a complete analysis of this case, in analogy 
to subsection II V A II The results of our investigation can be 
summarized as follows: 

• Different to the setup where we start with depolarized 
states, it is possible to extract a non-zero secret key 
rate per memory per second for the whole range of pa- 
rameters considered here, i.e., for 0.7 < < 1 and 
0.92 < pc < I. The largest value of the secret key 
rate per memory per second using binary states is in the 
same order of magnitude as for depolarized states. 

• The region where the Diir et al. protocol is optimal ex- 
tends to lower initial fidelities, compared to Fig. |5](b) 
and the largest value for the optimal rounds of distilla- 
tion is A; = 3. Also the region where no distillation is 
optimal increases. 

• Due to the small optimal k, the maximal number of 
memories decreases. 



7 



One would recommend the use of binary states when pc < 
0.97 and Fq < 0.8, as then the number of used memories is 
smaller than for depolarized states and additionally the secret 
key rate per memory per second is non-zero. 



B. The influence of the detector efficiency 

In this section we want to investigate the impact of finite- 
efficiency detectors on the secret key rate. The detector effi- 
ciency is given by the parameter rj^, with Q < tjj < 1, where 
rjd - I corresponds to perfect detectors. For implementing 
the detector efficiency in our formulas we have to replace the 
probability of successful distillation Poik, n) and the proba- 
bility of successful swapping in the n-th nesting level Pes («) 
in the equations for the repeater rate [Eqs. (|6) and (|9)] by 

PDik,n)^jjlPD{k,n) (14a) 
PEs(n)^7jlPEs(n), (14b) 

because the Bell-measurement requires a two-fold detector 
click. Additionally, we have to multiply the secret key rate 
[Eq. (HI] by a factor of rf^ which accounts for the final quan- 
tum key distribution measurement. 

The only contribution of the detector efficiency in the se- 
cret key rate is in the repeater rate. For simplicity we will 
consider the repeater rate without classical communication 
for entanglement swapping and entanglement distillation [see 
Eq. ( [TT] ) and ( fTST i in Sec.[Vl. After replacing the probabilities 
in the repeater rates by Eq. (fl4t . the repeater rate scales with 

'Id 

When analyzing different detector efficiencies we made the 
following observations: 

• with decreasing //,/, the region where no distillation is 
optimal increases such that for rjd = 0.1, it is optimal to 
not perform distillation for almost all parameters, 

• with decreasing 77,;, the optimal number of nesting levels 
also decreases, 

• with decreasing 77^, the region where the distillation 
strategy /3 (distillation only in the beginning) is optimal 
increases (see Fig.|7]l. 

Figure Q shows the optimal distillation strategies for the se- 
cret key rate per memory per second with a detector efficiency 
of rjd = 0.9. This can be compared to Fig.|5](e), where the 
detectors are perfect, i.e., rid - 1. We see that for low initial 
fidelities the region where the distillation strategy /? is optimal 
increases. 



C. More general strategies 



1. Distillation strategy y 




0.8 0.85 0.9 
Initial fidelity Fg 



FIG. 7. (Color online) Distillation strategies with imperfect detec- 
tors: Strategy a (nested distillation strategy) and strategy /3 (distil- 
lation only before the first entanglement swapping) that lead to the 
optimal secret key rate per memory per second [Eq. (0, L = 600 km 
and;7rf = 0.9]. 



For this purpose we fix the parameters for the initial fidelity 
and the gate quality pQ and vary the number of nesting 
levels and the number of distillation rounds in each nesting 
level. A result for the parameters - 0.9 and pq - 0.96, 
is shown in Table |T] There, we report the optimal distillation 

TABLE I. Optimal secret key rate per memory per second [Eq. ©J 
and corresponding distillation vector k [Eq. ([3}] for the difi'erent dis- 
tillation protocols, = 0.9, and pc, = 0.96. 



N 


Diir et al. protocol 
K k 


Deutsch et al. protocol 
K k 





3.92 • 10-' 


(0) 


3.92 • 10-' 


(0) 


1 


2.11 • 10-^ 


(0,2) 


2.63 • 10-^ 


(0,1) 


2 


1.09 • 10 " 


(2,3,2) 


3.03 • 10-" 


(0,3,1) 


3 


2.66 • 10-" 


(3,4,5,5) 


1.51 • 10" 


(0,3,3,1) 


4 








1.37 • 10-^ 


(0,3,3,3,1) 



As mentioned in Sec. lIIBI we now lift the restriction that the 
number of distillation rounds in each nesting level is the same. 



vector k, see Eq. (O, for the number of nesting levels up to 
N - A, and the corresponding secret key rate per memory per 
second. We found the optimal k by calculating the key rate 
for all possible k. For the given parameters, distillation only 
in the beginning does not help. Comparing the values that we 
achieved in Sec. II V Al i.e., only considering strategy a [distil- 
lation vector^ - (k, k, k)] 01 f3[k - (k, 0, 0)], the optimal 
secret key rate for the given set of parameters was 0.99 ■ 10-"* 
with N - 2,k - {2, 2, 2) for the Diir et al. protocol. Here, the 
best secret key rate is 3.03 • lO"'* for = 2, k^ (0, 3, 1) and 
the Deutsch et al. protocol. Thus, the secret key rate is in the 
same of order of magnitude, but can be improved by a factor 
of 3. Table HJ gives results for the parameters - 0.97 and 
Pg = 0.99. The parameters that lead to the optimal secret key 
rate per memory per second of K - 0.32 in Sec. lIV Al are for 
the nesting level N - 3, distillation strategy fi,k- (2, 0, 0, 0) 
using the Deutsch et al. protocol. We see in this example that 
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TABLE II. Optimal secret key rate per memory per second [Eq. (|4j] 
and corresponding distillation vector k [Eq. ([3}] for the different dis- 
tillation protocols, Ff) = 0.97, and pa = 0.99. 

Diir et al. protocol Deutsch et al. protocol 

N a: k K k 






7.97 • 10"' 


(0) 


7.97 • 10^' 


(0) 


1 


9.64 • 10-* 


(0,0) 


9.64 • 10-" 


(0,0) 


2 


0.19 


(0,0, 0) 


0.19 


(0,0,0) 


3 


0.57 


(0, 0, 2, 0) 


0.73 


(0, 2, 0, 0) 


4 


0.96 


(0,1,1,1,0) 


0.88 


(0,1,1,1,0) 


5 


0.62 


(0,1,1,2,0, 0) 


0.54 


(0,0, 2,1,0,0) 


6 


0.34 


(0,1,1,1,1,1,0) 


0.2 


(0,1,1,1,1,1,0) 



by allowing general distillation strategies, the optimal secret 
key rate can be increased by increasing the nesting level. In 
this example, different to above, the Diir et al. protocol re- 
mains optimal. 

Due to the computational complexity, we only calculated 
the general distillation strategies for two specific set of param- 
eters (see Tables HI and nib. As the quantum repeater exhibits 
a self-similar structure, dynamical programming was used in 
ll4lll in order to optimize the average time to create an entan- 
gled pair for a given final fidelity and distance. The results and 
methods of ll4lll cannot be used for a global optimization, as 
we have found counterexamples, where the distillation vector 
consist of different numbers in each nesting level (see, e.g., 
TableUfor the Diir et al. protocol and Table HHi. 

We see that it is not trivial to make general statements about 
the optimal number of rounds of distillation, regarding the se- 
cret key rate. For implementations, one has to determine the 
parameters of the experiment, i.e., Fq and pq, and then to op- 
timize the secret key rate for any specific set of parameters. 

2. Optimal strategies for a fixed number of memories allowing 
parallel setups 

We have mentioned in Sec. IIIICI that in the following we 
want to fix the number of memories, and find which setup is 
optimal. As the memories in the Deutsch et al. protocol are 
restricted to a power of two (see Sec. IIII C) , we allow also 
setups working in parallel. 

For calculating the optimal strategy for a fixed number of 
memories M, we solve the following equation to get all pos- 
sible setups: 

M 

J]s,nm^M (15) 

m=l 

for s„t € N and |^-^J > s,„ > 0. The number s,„ denotes how 
many setups using m memories work in parallel. We then 
proceed by calculating for each setup the optimal secret key 
rate per second, i.e., mK„, = r^oRrep- The index m for the secret 
key rate K means that we restrict to distillation vectors and 
nesting levels that solve Eqs. ( fTOb and ( fTTT ) for m memories. 



The optimal vector s - (si, sm), a solution of Eq. ( fTSl ), is 
found by maximizing the value 2m s„,mK,n. The secret key 
rate of the total setup with a fixed number of memories M is 
thus given by 

M ' ^^^^ 

with 2ni Smfn = M. We will also compare this result to a con- 
figuration of one setup with distillation vector k [see Eq. (O], 
if possible. For the parameters Fq - 0.97 and pc = 0.99 we 
calculated the optimal s to see if a parallel setup is advanta- 
geous. We showed in Sec. IIV Al that the optimal number of 
memories is four using the Deutsch et al. protocol for N = 3, 
k = (2, 0, 0, 0) with a secret key rate per memory per second 
of K = 0.32. In Table HIH we fixed the number of memories 
and calculated the optimal key rate by optimizing the remain- 
ing parameters. We find that except for M = 4, the secret key 
rate per memory per second is higher (or equal) for the Diir et 
al. protocol. 

TABLE III. Secret key rate per total number of used memories 
[Eq. ( I16b 1 for the different distillation protocols and for a fixed num- 
ber of memories M. The optimal configurations are given by the 
distillation vectors kM = (^o, •••,^jv), with kM denoting the distilla- 
tion strategy using M memories. The notation (k„,,k„,i) means par- 
allel setups using m and m' memories. Parameters: Fg = 0.97 and 
Pa = 0.99. 





Diir et al. protocol 


Deutsch et al. protocol 


M 


K 


configuration 


K 


configuration 


1 


0.19 


k, = (0, 0, 0) 


0.19 


k, = (0,0,0) 


2 


0.58 


4 = (0,0,2,0) 


0.58 


4 = (0,0,1,0) 


3 


0.96 


^3 = (0,1,2,0,0) 


0.45 


(4,4) 


4 


0.82 


fc, = (0,1,1,1,0) 


0.87 


4 = (0,0,2,0,0) 


5 


0.81 


(kki) 


0.73 


(4,4) 


6 


0.96 


(4,4) 


0.78 


(4,4) 


7 


0.89 


(4,4) 


0.69 


(k[,k2,k4j 



V. IMPACT OF CLASSICAL COMMUNICATION ON THE 
SECRET KEY RATE 

In this section we investigate the impact of the classical 
communication time required for acknowledging the success 
of entanglement swapping and entanglement distillation on 
the secret key rate. First we calculate the repeater rates /?Rep,NC 
where we only consider the classical communication for en- 
tanglement distribution. Then we compare the optimal secret 
key rates using the repeater rate without (/?Rep,Nc) and with 
classical communication (/?Rep) [see Eqs. (|6]l and (|9]l], and dis- 
cuss the differences. 

The repeater rate for the Deutsch et al. protocol without the 
classical communication time due to entanglement swapping 
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and entanglemend distillation is given by (see, e.g., llsilsoll) 

which is derived from the solution of the recurrence relation 
in Eq. Q by omitting all terms acknowledging the classical 
communication time, i.e., the terms with 2^^"' and 2^ [see 
Appendix, Eq. ( IA.2l i1. 

The corresponding repeater rate for the Diir et al. protocol 
can be derived analogously by omitting terms in the recur- 
rence relation given in Eq. (|8}. This leads to 

^Rep,NC-^(3j U^' 

where 

>=0 /H={) ;=() 

and PEsiO) = 1 (see Appendix l 2 bi for details). 

For investigating the relevance of the classical communica- 
tion time, we determine the relative change of the optimal se- 
cret key rates with this classical communication K{Rj^gp) and 
without classical communication A'(/?Rep_Nc), i.e., 

\AK(Rr.p,^c),K{Rr,p)), (20) 

with K being the optimal secret key rate per memory per sec- 
ond [Eq. (01)]. The relative change Arei is defined by 

Are\(a,b) -.^ (a - b) / msi\{a,b}. (21) 

We optimize both secret key rates over the same parameter set 
as in Sec.HVl 

Figure [8] shows the relative change of the optimal secret 
key rate per second per memory. Depending on the param- 




FIG. 8. (Color online) The relative change [Eq. | |20H of the optimal 
secret key rate per memory [Eq. (|4)] without and with the classical 
communication time (see text) in terms of the initial fidelity Fq and 
gate quality pc (L = 600 km). 



eters the secret key rate without the classical communication 
time /*r(^Rep,Nc) can be by a factor of two bigger This is the 
yellow region in Fig.|8] By inspecting Fig.|5](a) the secret key 
rate in this region is in the order of secret bits per second. Ex- 
cept from some regions, the parameters leading to the optimal 
secret key rate without and with the classical communication 
time are almost the same. 

In a previous paper [33 it was claimed that the main contri- 
bution of the entanglement generation time (i.e., the inverse of 
the repeater rate) is the classical communication time needed 
for acknowledging the success of entanglement swapping and 
entanglement distillation. We have seen that this is not the 
case here. Comparing the results given in Ref. [[SJ, we have 
found that the relative change [Eq. (|20] i1 is not more than 40% 
and both secret key rates are in the same order of magnitude 
(distance L = 1280 km). We discovered that the influence 
of non-perfect success probabilities for distillation is substan- 
tial. Here, the entanglement generation time is one order of 
magnitude larger than in [3], where the success probability 
of entanglement distillation was not considered (parameters: 
Fo = 0.96 and pc = 0.995). 

Note that here we consider the memories to be perfect. Cer- 
tainly, if the storage time of the memories is limited, such an 
analysis might lead to other results. 



VI. CONCLUSION 

For given imperfect initial fidelities and imperfect gates, 
we found the quantum repeater configurations (i.e., the dis- 
tillation protocol, distillation strategy, number of distillation 
rounds, number of nesting levels, and number of memories) 
that lead to the optimal secret key rate per memory per second. 
For this purpose we focused on a specific recurrence protocol 
(Deutsch et al. ) and an entanglement pumping {Diir et al. ) 
protocol. We found that there exists a regime {pQ < 0.99 and 
Fq < 0.8) of parameters where the entanglement pumping 
protocol performs best. However, for lower initial fidelities 
typically the recurrence protocol is favorable. 

Regarding the distillation strategy [distilling with the same 
number of rounds in each nesting level (strategy a) or distill- 
ing only in the beginning (strategy fj)], we have seen that for 
some parameters, strategy which is experimentally more 
feasible, is optimal and that this region strongly depends on 
the detector efficiency. We found that with decreasing detec- 
tor efficiency it is optimal to not distill. Lifting the restric- 
tion of an equal number of distillation rounds in each nesting 
level for some set of parameters (initial fidelity and gate qual- 
ity), we have found that the improvement of the secret rate is 
not more than one order of magnitude compared to distillation 
strategy a. We also showed that increasing the number of re- 
peater stations and rounds of distillation does not necessarily 
lead to an increase in the secret key rate. 

We investigated the role of the form of the input states, 
where we used either a depolarized or a binary state. We found 
that the secret key rate per memory per second for both forms 
is in the same order of magnitude; the binary states have the 
advantage that for low fidelities and gate qualities they provide 



10 



a non-zero secret key rate compared to a depolarized input 
state. Binary states can be produced by the hybrid quantum 
repeater 

When fixing the number of memories for a specific set of 
parameters, we investigated which distillation protocol is op- 
timal, and found that setups working in parallel can be advan- 
tageous. 

Finally, we derived formulas for the generation rate of en- 
tangled pairs per second (repeater rate) including the classical 
communication times for acknowledging the success of en- 
tanglement swapping and entanglement distillation. We cal- 
culated the secret key rate per memory per second without 



and with the classical communication time and found that the 
main contribution is the time to distribute the entangled pairs, 
which is contrary to the results in the literature. 

Further studies could implement the formalism for the 
quantum repeater in the context of finite keys (see, e.g ., |0] 
for a review) and for imperfect memories (see, e.g., mM ). 
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Appendix: Solutions for the recurrence formulas 



In this appendix we give the solutions for the recurrence 
formulas [Eqs. (|7]i and dHJ in Sec. 1111 B I that are needed for 
calculating the repeater rate for the Deutsch et al. and the Diir 
et al. protocol. 



1. The Deutsch et al. protocol 



We first solve the recurrence relation for Eq. (iTct and ter- 
minate when kN = 0: 



Then we replace t'-'(0, A^) by Eq. ( fTbl i resulting in: 

which is another recurrence relation depending on A^. We can 
now solve this relation until we reach T^(k(), 0): 



21 )jPEsiN-j) 



N /TxW-i N-i 



PEs{N-j) 



j=0 



PEsiN-jY 



where we can replace T^iko, 0) by r°(0, Q)a{Q) + j6(0) using 
Eq. dAH i. 



(1 \kN kw-l . 



N) 



Dur/ 



2. The Diir et al. protocol 

a. Solution of the recurrence relation Eq. l[8} 

The solution of the recurrence relation in Eq. (|8) is analo- 
(A. 1) gously given by 



ku-l i 



\j=o 



,=0 j=0 



(kN-l i 



y i=0 j=0 



=:b(N) 



(A.3) 



r 



where we use the convention that 2,Jo/(0 
T-i 



and 



llJJo c(i) = 1. Inserting now T^^CO.A^) = ^T^^'ikN-uN - 
1) + 2^-^ into T°"'(kN, N) = T°^'(0, N)a(N) + b(N) leads to the 
recurrence relation: 



+b(N). 

The solution of this relation is 



2/ )JPEsiN-j) 

N-i 



i=l j=0 



a(N - j) 
)jPEs{N-j) 



N ,^\N-i N-{i+\) 



The solution for T^^'^iko, 0) we get from Eq. ( |A.3t : 
j^"\ko, 0) = T°"(0, 0)fl(O) + b{0). 



(A.5) 
(A.6) 
.(A.7) 

(A.8) 



b. Derivation of the repeater rate without the classical 
communication time for entanglement distillation and entanglement 
swapping, Eq. (TSj 



For obtaining the solution for the recurrence relations with- 
out classical communication time for entanglement distilla- 
(A 4) tion and entanglement swapping, we just set in Eq. ( IA.3I ) 
b{N) = 0. What remains from the solution is just the first 
term of Eq. ( |A.5l l, which is exactly 



^»,N)^^^^(ko,o)i-] n 



3\ i-r a{N-j) 



2/ )JPEs(N-j) 



(A.9) 



We replace r""(;to, 0) by T^'^'iO, O)a(O) [see Eq. (AM ] and get 



3\ r-r a(N-j) 



21 )JPEsiN-j) 



(A. 10) 
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The repeater rate is given by 

1 

ToT'^f{kM,N) 



^Rep,NC - 7, niiiy. :T (A-U) 



2ro 

where we used that t^^'XC, 0) = 



